Last Updated: June 9, 2026
Introduction
ShiftX (“App”, “Service”, “we”, “our”, or “us”) is provided by Point Blank Software.
This Privacy Policy explains how information is collected, used, disclosed, and protected when you use the ShiftX mobile application and the related web application available through app.efish.biz (collectively, the “Services”).
By using the Services, you agree to the collection and use of information in accordance with this Privacy Policy.
Information We Collect
Information You Provide
We may collect information that you voluntarily provide when using the Services, including:
- Name
- Email address
- Username
- Company or organization information
- Scheduling and workforce management data
- Messages, notes, and comments entered into the Services
- Support requests and communications
The specific information collected depends on your employer’s implementation and how the Services are used.
Device Information
When you use the ShiftX mobile application, we may collect certain device information, including:
- Device model
- Operating system version
- Application version
- Device language settings
- IP address
- Browser and WebView information
- Mobile network information
Device Identifiers
ShiftX uses Firebase Cloud Messaging (FCM) to provide push notifications.
As part of this functionality, the application collects and transmits a unique Firebase Installations token that is used as a device identifier.
This identifier may be transmitted to our servers as the X-PB-Device-ID header and may be associated with your user account for purposes including:
- Delivering push notifications
- Managing device registrations
- Preventing duplicate device registrations
- Troubleshooting notification delivery issues
- Security and fraud prevention
This identifier does not directly reveal your identity but may be linked to your account within our systems.
Push Notification Data
If you enable notifications, we may collect and process information related to notification delivery, including:
- Firebase Cloud Messaging token
- Notification delivery status
- Notification interaction events
- Notification preferences
- Device registration information
Push notifications may contain work-related scheduling, communication, or operational information provided by your employer or organization.
You may disable notifications through your device settings at any time.
Information Collected Through the Web Application
The ShiftX mobile application displays and interacts with the ShiftX web application hosted at:
app.efish.biz
Because the mobile application functions as a WebView-based client, information collected through the web application is also subject to this Privacy Policy.
The web application may collect:
- Login and authentication information
- Session identifiers
- IP address
- Browser and device information
- Usage activity
- Workforce management data
- Scheduling information
- Time and attendance records
- Job assignments
- Employee communications
- Uploaded files and attachments
- Form submissions
- System logs and audit records
Automatically Collected Information
We may automatically collect technical information about how the Services are used, including:
- Access dates and times
- Pages viewed
- Features accessed
- Referring URLs
- Error logs
- Diagnostic information
- Performance metrics
- Security logs
How We Use Information
We use collected information to:
- Provide and maintain the Services
- Authenticate users
- Manage workforce scheduling and operations
- Deliver push notifications
- Improve application performance
- Troubleshoot technical issues
- Monitor system security
- Detect fraud or misuse
- Comply with legal obligations
- Respond to support requests
- Communicate service updates
Cookies and Similar Technologies
The web application may use:
- Cookies
- Session cookies
- Local storage
- Authentication tokens
- Similar technologies
These technologies help maintain user sessions, improve functionality, and enhance security.
Sharing of Information
We do not sell personal information.
We may share information with:
Service Providers
Third-party providers that help operate the Services, including:
- Cloud hosting providers
- Database providers
- Notification services
- Technical support providers
Firebase Cloud Messaging
ShiftX uses services provided by Google Firebase to deliver push notifications. Information necessary to provide notification services may be transmitted to Google.
Employers and Organizations
Because ShiftX is used by businesses and organizations, information may be accessible to your employer or organization administrators as part of normal system operations.
Legal Requirements
We may disclose information when required by law or when reasonably necessary to:
- Comply with legal obligations
- Protect our rights
- Investigate fraud
- Protect users or the public
Data Retention
We retain information for as long as necessary to:
- Provide the Services
- Maintain business records
- Comply with legal obligations
- Resolve disputes
- Enforce agreements
Retention periods may vary depending on the type of information and your organization’s requirements.
Data Security
We implement reasonable administrative, technical, and organizational safeguards designed to protect information from:
- Unauthorized access
- Disclosure
- Alteration
- Destruction
However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Your Rights
Depending on your location, you may have rights regarding your personal information, including:
- Access
- Correction
- Deletion
- Restriction of processing
- Data portability
- Objection to processing
Requests should generally be directed to your employer or organization administrator first if the organization controls the data within ShiftX.
Children’s Privacy
The Services are not intended for children under 13 years of age.
We do not knowingly collect personal information from children under 13.
If we learn that such information has been collected, we will take appropriate steps to remove it.
International Data Transfers
Information may be processed and stored in countries other than your country of residence.
By using the Services, you consent to such transfers where permitted by applicable law.
Third-Party Services
The Services may interact with third-party systems and integrations selected by your organization. Those third parties maintain their own privacy policies and practices.
We are not responsible for the privacy practices of third-party services.
Changes to This Privacy Policy
We may update this Privacy Policy periodically.
Any changes will be posted on this page with an updated effective date.
Continued use of the Services after changes become effective constitutes acceptance of the revised Privacy Policy.
Contact Information
For questions regarding this Privacy Policy, contact:
Point Blank Software
Email: support@pointblanksoftware.com